Virus Database

Natas.4774

Description Natas.4774

This is a dangerous memory resident multipartite polymorphic virus. It hooks INT 13h, 21h and writes itself into MBR of hard drive, boot sectors of floppy disks and at the end of COM and EXE files that are accessed. It does not infect the files that are opened by PKZIP/PKUNZIP, LHA and ARJ archivators. Depending on its internal counters the virus formats disk sectors. It contains the internal text strings:
BACK MODEM

Time has come to pay (c)1994 NEVER-1

Check other viruses! Be aware! Use Antiviral Software

SMEG.Pathogen

Description SMEG.Pathogen

This is a dangerous memory-resident parasitic polymorphic virus. It was written by using a SMEG polymorphic engine. It traces and hooks INT 21h, and write itself to the end of COM and EXE files that are executed or opened. While infecting a file, it checks the file name, and does not infects the files with names CO*.*, F-*.*, SC*.*, TB*.*, VI*.*, FS*.*, VP*.*, VS*.*, CL*.*, SM*.*, FL*.*. On Mondays, depending on the system time and its internal counters, the virus erases the CMOS and the disk sectors, and then displays the following message:
Your hard-disk is being corrupted, courtesy of PATHOGEN!
Programmed in the U.K. (Yes, NOT Bulgaria!) [C] The Black Baron 1993-4.
Featuring SMEG v0.1: Simulated Metamorphic Encryption Generator!
'Smoke me a kipper, I`ll be back for breakfastall..'
Unfortunately some of your data won`t!!!!!
It also contains the following text strings:
EXECOM /:.<>+=;,"[]|OC-FCSBTIVSFPVSVLCMSLF
SMEG v0.1

SMEG.Queeg.a

Description SMEG.Queeg.a

This is a dangerous memory-resident parasitic polymorphic virus. It was written by using a SMEG polymorphic engine. It traces and hooks INT 21h, and write itself to the end of COM and EXE files that are executed or opened. It also hooks INT 13h and 20h. While infecting a file, it checks the file name, and does not infects the files with names CO*.*, F-*.*, SC*.*, TB*.*, VI*.*, FS*.*, VP*.*, VS*.*, CL*.*, SM*.*, FL*.*. On Sundays, depending on the system time and its internal counters, the virus erases the CMOS and the disk sectors, and then displays the following message:
+---------------------------+
ƒ -" QUEEG "- ƒ
ƒ ~~~~~ ƒ
ƒ (C) The Black Baron 1994 ƒ
ƒ ƒ
ƒ Featuring: SMEG v0.2 ƒ
ƒ ƒ
ƒ Better than lifeall.. ƒ
+---------------------------+

It also contains the following text strings:
EXECOM /:.<>+=;,"[]|OC-FCSBTIVSFPVSVLCMSLF
SMEG v0.2

Home